CVE-2022-38745

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions before 4.1.14

Description The issue is related to the possibility of adding an empty entry to the Java class path in Apache OpenOffice. This could allow a remote attacker to execute arbitrary Java code from the current directory by loading a specially crafted java file.

Recommendations For versions before 4.1.14, update to version 4.1.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the Java class path to minimize the risk of exploitation.